CVE-2023-31843

Vulnerability

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL injection in the /eval/admin/view_faculty.php endpoint. The id parameter is directly concatenated into an SQL query without sanitization, allowing an attacker to inject arbitrary SQL statements [1].

Exploitation

An attacker with valid admin credentials (e.g., admin@admin.com / admin123) can exploit the vulnerability by sending a GET request to /eval/admin/view_faculty.php?id= with a crafted payload. For example, the payload -1 union select 1,2,3,4,database(),6,7,8,9--+ extracts the database name (evaluation_db) in the response [1]. No additional user interaction is required.

Impact

Successful exploitation allows the attacker to retrieve arbitrary data from the database, including user credentials and other sensitive information. The UNION-based injection enables extraction of multiple columns, leading to full information disclosure [1].

Mitigation

No official patch has been released by the vendor as of the publication date. The application should be updated to use parameterized queries or prepared statements to prevent SQL injection. Input validation on the id parameter is also recommended [1].